Skip to content

Security Fix: Restrict Admin UI Access

Compare
Choose a tag to compare
@beaulebens beaulebens released this 04 Feb 18:57

In previous versions, non-Admins had access to being able to configure Services, which also meant that they could see API secrets etc. On multi-user installations, this is likely undesirable, so this version restricts access to all management interfaces to users who have manage_options (normally Administrators).

Note this is the same as v1.7.1, it just updates all the version numbers correctly.